https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T21:17:59.765853+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-165270 EUVD-2026-165270 2026-10-17T21:17:59.831693+00:00 EUVD-2026-165270 https://cve.radiocsirt.org/vuln/fkie_cve-2020-28480 fkie_cve-2020-28480 2026-10-17T21:17:59.831738+00:00

The package jointjs before 3.3.0 are vulnerable to Prototype Pollution via util.setByPath (https://resources.jointjs.com/docs/jointjs/v3.2/joint.htmlutil.setByPath). The path used the access the object's key and set the value is not properly sanitized, leading to a Prototype Pollution.

 https://cve.radiocsirt.org/vuln/ghsa-qwp9-52h8-xgg8 GHSA-qwp9-52h8-xgg8 — Prototype pollution in JointJS 2026-10-17T21:17:59.831774+00:00

Affected: npm: jointjs

The package jointjs before 3.3.0 are vulnerable to Prototype Pollution via util.setByPath (https://resources.jointjs.com/docs/jointjs/v3.2/joint.htmlutil.setByPath). The path used the access the object's key and set the value is not properly sanitized, leading to a Prototype Pollution.

 https://cve.radiocsirt.org/vuln/gsd-2020-28480 gsd-2020-28480 2026-10-17T21:17:59.831800+00:00 gsd-2020-28480